--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:20:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:20:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T18:20:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T18:20:52Z" name: csr-gvwxm resourceVersion: "5890" uid: 6007dfc2-c618-44de-8c55-4447cff18c2e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9011bc5ed25ab308fc9e8507460f559e47cd0f78404cb92c153681925cd2fe11 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-5.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM1akNDQWM2Z0F3SUJBZ0lRTC82NWNMWXl6WGhORzF0U2F4ZlFtekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBME1qSXhPREUxTlRKYUZ3MHlPREEwTWpFeE9ERTFOVEphTUVneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFdk1DMEdBMVVFQXhNbWMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNell0TlM1bFl6SXUKYVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVE2NDlOQTFOQmpiQWhtRHRPZgpMNnI2LzVTd3ZKZ3B2K2pwQ0J3WWdGd0FRb2kzSWhYeXVUM3J0MFF6OUNFUlFzc3NjZFR2SjV0d0RBNXNxZEV5Ckx0UExvNEd3TUlHdE1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFUQU0KQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRR0N0d3YxVFdLSzR6elRQQXlFdnRRQ2t3aHc2K29BVwo3WDVOMGVDT3A0R0lqcUV4THYwckthSXNDVlBaaTJLWDRlU1MwVlR2dy85YTl6cndNcElnQXNZd0t3WURWUjBSCkJDUXdJb0lhYVhBdE1UQXRNQzB4TXpZdE5TNWxZekl1YVc1MFpYSnVZV3lIQkFvQWlBVXdEUVlKS29aSWh2Y04KQVFFTEJRQURnZ0VCQUtBL0orZHBwK093aFRDenR1Z0M0YmlydmJWL0MzSjJvekdLbUNNMGlYYlJNMkZiVzFONQpPSS92b0RzM1l3S05UMnZpYkNUSG5wZkprcElLMVBENDYvTkl5ajN4bWIxRG96eVV3YjVsUHo3YnplbDV1emNECkZUVXFlSUluK1NIUXFsaVFFZWxGQUhtMkZqR2xQWTNBYzRVVXVybVU3U0xmUy9qeFhkaEZvaU1yUE40Z1pCRGsKUnRkeG0xL2JHdUpRZmM4dnBucTloN2N4THlUVmJGZmhZcEtJSkdrczJacjh0SW44cTV2RFNmL1o4dTF3WlQ3bQp6V01mb0E4aC94RXp6T3ppcmsrdnJiRTJWS2ZpMDh6T2p6YnRsL2o1cVpGVGdrNnNMeTdRTWJnaGtVTFFnVHRVClNZSkhOcmFKclNUOGxXNXlpU09Jd1dTUCswWk1DRGNsOHI0PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-04-22T18:20:52Z" lastUpdateTime: "2026-04-22T18:20:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved